Register now or log in to join your professional community.
<p>I have configured cyberoam firewall where all the users are accessing the PC using windows server2008 AD. But in the firewall i have denied the access for users but on the next day they can access every sites.</p>
access list should be used in your firewall. if you want to simplify your administration job to restrict site by name, you can use proxy server such ISA server or other restricted sites software program.
cyberoam should have content filter policy, configure the AD integration on the firewall and configure the web filter policy on the firewall based on AD groups (i recommend group based policy) , and also you can enable SSO,depends on the company's requirements.
check below links for more details:
Single Sign On Authentication:
https://kb.cyberoam.com/default.asp?id=1637.
Integrate Cyberoam with Active Directory:
https://kb.cyberoam.com/default.asp?id=1637
If it is a Hardware firewall , we have an option to linking with active directory service for controlling users for External access , That is the best method we can easily administrate enter users , to use there internet usage and web filter ..etc
Hi,
It is very simple. We need to create one LAN to WAN rule in the firewall as per the host address of the nodes. So this way we can simply restrict the internet access or file access of the users. If the server need to get full access (without any obstacles), that also we can assign in LAN to WAN policy rules and WAN to LAN policy rule. In this scenario the primary gateway must be the firewall device.
Thank you for your query.
Best Regards,
FAISAL CHANDRATHIL ABDUKUNJU
https://www.facebook.com/faisalabdukunju
you need to control by internal firewall or external firewall by make a good policy to restrict users to access to the internet web pages by closing the ports by the name for the web site or by service protocol options like (DNS, HTTP, HTTPS, FTP, FTPS, POP3, POP3S, SMTP, MS-Share, IM, NNTP, IMAPS)
